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Abstract 

c/3 ' 

^, ' The many-to-one interference channel has received interest by virtue of embodying the essence 

of an interference network while being more tractable than the general A'-user interference channel. 

K^ \ In this paper, we introduce information theoretic secrecy to this model and consider the many-to-one 

OA , interference channel with confidential messages, in which each receiver, in particular, the one subject 

(•~^ ■ to interference, is also one from which the interfering users' messages need to be kept secret from. 

lO ' We derive the achievable secrecy sum rate for this channel using nested lattice codes, as well as an 

o ; 

f^ , upper bound on the secrecy sum rate for all possible channel gain configurations. We identify several 

nontrivial cases where the gap between the upper bound and the achieved secrecy sum rate is only a 
. . function of the number of the users K, and is uniform over all possible channel gain configurations 

;h ' in each case. In addition, we identify the secure degree of freedom for this channel and show it to be 



C^ 



equivalent to its degree of freedom, i.e., the secrecy in high SNR comes for free. 
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I. Introduction 

In a wireless environment, interference is ever-present. Traditionally, interference is viewed as 
a harmful physical phenomenon that should be suppressed or avoided. On the other hand, when 
confidentiality of transmitted information is a requirement, because interference also limits the 
reception capability of a potential eavesdropper, it may end up being beneficial to the intended 
receiver. Hence it is important to study how to manage and/or introduce interference intelligently 
such that its benefit for secrecy can be harvested. 

In this work, we study this problem in the framework of information theoretic secrecy. 
Information theoretic secrecy was first proposed by Shannon in [H] and was later extended 
to noisy channels by [IH-flll. In this framework, the eavesdropper is assumed to be passive and 
has unbounded computation power. Secrecy is measured with mutual information: A message 
is said to be secure from eavesdropping if the mutual information between the message and the 
knowledge of the eavesdropper per channel use is negligible. The focus of problems studied in 
this framework is to find the fundamental transmission limits of a communication channel if the 
message(s) must be kept secret from eavesdropper(s). 

The channel model we study in this work falls into the class of (interference) channels with 
confidential messages. In these channels, the receiver(s) can hear more than one transmitter and 
hence can eavesdrop on messages transmitted by other users in addition to receiving the message 
intended for it. Interference channel with two users and different eavesdropper settings have been 
studied extensively up to date, e.g., ll5l- lfT2l . However, the gap between the achievable rates and 
the best known outer bound is still unbounded except for special cases. Reference [5] identifies 
the secrecy capacity region of a switching interference channel with confidential messages defined 
therein. Reference derives the inner and outer bound of a one-sided interference channel with 
confidential messages and shows the gap between these bounds to be within 1 bit. Reference (HI 
studies two-user interference channel with an external eavesdropper and identifies the secrecy 
capacity region within 0.5 bit for the very strong interference condition. 

Interference channel with more than two users has also been studied. A symmetric static K- 
user interference channel is studied in [[T3l . Reference lfT4l has studied the A'-user interference 
channel where all links were i.i.d. fading and sampled from a continuous distribution. Again the 
results in both cases are limited to achievable rates and no outer bound is known in general. 



In this work, we study the K-user Gaussian many-to-one interference channel, where K > 3. 
This model without secrecy constraints has first been studied by [[TSl and recently by [ [T6l . In 
this channel model, only the A'th user is interfered by the other users, hence the name "many-to- 
one". A main motivation for studying this channel is to be able to comprehensively characterize 
the role of interference in this simplified A'-user setting. Reference [|T5l derives the inner and 
outer bound for the channel model and shows that their gap is bounded by a constant which is 
only a function of the user number K. When proving the inner bound, [fTSl uses layered coding 
and, for each layer, uses the sphere shaped lattice code from ifTTl . Doing so aligns signals from 
the first K — 1 users at the A'th receiver, and facilitates the decoding process at this receiver. 
Reference [[T6l characterizes a set of channel gains for which the sum capacity can be achieved 
by treating interference as noise at all receivers and using random codes at all transmitters. 

In this work, we introduce secrecy constraints to this model in order to assess the signifi- 
cance of interference on secrecy considering the simplest setting for which this investigation is 
meaningful: The A'th user, which is interfered by the first K — 1 users, is also an eavesdropper 
on the messages transmitted by the first A' — 1 users. Hence care must be exercised to ensure 
the secrecy of these messages. The main contribution of this work is a lower bound and an 
upper bound for the secrecy sum rate of this model for all channel gain values and interference 
regimes. For two cases, we show the gap between these two bounds is only a function of the 
number of users K: (i) all channel gains between the first K — \ users and the A'th receiver are 
not greater than 1 (the direct link gain), or (ii) the first K — \ users have the same average power 
constraint and the same channel gains for the links to the A'th receiver. For other cases, the 
bounds match in terms of the secure degree of freedom, which is a high SNR characterization 
of the secrecy sum rate, but the gap between the upper bound and the lower bound we derived 
is in general a function of both K and the channel gains. 

The technique to derive the upper bound on the sum rate entails dividing the many-to-one 
channel into a point-to-point link from the A'th user to the A'th receiver, and a multiple access 
wiretap channel with an orthogonal main channel composed of the first K — 1 users and their 
receivers flVl, and upper bounding the secrecy sum rate of the multiple access wiretap channel 
part M- 

To derive the achievable rate, we utilize structured codes and layered coding ifTTI . ifTSl . The 
design of the layers follows [15], but for each layer, though notably, we use nested lattice codes 



from [[T8l instead of the sphere shaped lattice codes as in [fTSl . The merit of using nested lattice 
codes for secrecy problems has recently been demonstrated in ifTTIl : and the equivocation in this 
case is computable utilizing the nested structure. 

We must also note that combining layered coding and nested lattice codes has been used in 
[fm and lfT3l to prove achievability results for the fully connected interference channel with 
confidential messages. As shown in [fTT]| and lfT3l . in general, the power allocated to each 
layer is limited in order for their interference to be "cancelable" at multiple receivers. This in 
essence forces us to increase the number of layers to support larger average power constraints. 
Unfortunately, increasing the number of layers leads to increased rate at which the information 
leaks to the eavesdropper. Luckily, for the many-to-one channel, since the channel is only sparsely 
connected, the number of layers is bounded. In fact, it is only a function of the number of users 
K ifTSl . This means, if each layer leaks information at a certain rate, the total rate at which the 
information leaked to the eavesdropper is just a function of K and does not grow unbounded 
with the average power constraint. This fact allows us to identify the two cases described earlier 
in the introduction where the gap between the lower and upper bound on the secrecy sum rate 
is only a function of the number of users K. 

The remainder of the paper is organized as follows: In Section |Ill we describe the channel 
model. Section UlI] states the main results, i.e., the upper bound and lower bound on the secrecy 
sum rate. Section |IV] proves the lower bound. Section |V] proves the upper bound. Section |VI] 
concludes the paper. 

II. The Gaussian Many-to-one Interference Channel with Confidential 

Messages 

A. Model 

The channel model is shown in Figure [IJ There are K users, denoted by node 5*1, 5*2, ..., Sk- 
User k transmits a message Wk to its receiver D^. The network is sparsely connected in the 
sense that only the i^th user is experiencing interference from the other K — 1 users. There is no 
interference among the first K — 1 users. Let Xj, Yi denote the transmitted and received signals 
for user i. Let ^Jai denote the channel gain between user i and receiver K. Then the channel 
can be described formally as: 

Yk = Xk + Zk, ,l<k<K-l (1) 
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Fig. 1. Many-to-one Gaussian interference channel with K users 



K-l 



Yk=Y. v^^« + Zk (2) 



i=l 



where Z^s are independent zero mean Gaussian random variables with unit variance. 

Let n be the total number of channel uses. Since for Wi, ..., Wk~i, node Dk is an eaves- 
dropper, which receives signal YJ^, we have the following secrecy constraint: 

lim -H {W,, ..., Wk-i\Y^) = lim -H {W,, ..., Wk-i) (3) 

n— >oo 77, 1-11' n— 5>oo j^ 

Let Wk be the decoding result of Wk computed by node Dk- Then in order for Wk to be 
transmitted reliably, we need: 

lim FiiWk ^Wk) = (4) 

n— >oo 

The average power constraint for node Sk is Pk- Let X^ j denote the value of Xk during the 
ith channel use. Then the power constraints can be expressed as: 

\im-J2E\xl]<Pk (5) 

n— >cxD ri ^ — ' L 'J 
"■ 1=1 

Remark 1: We restrict Xj, Yi, i = 1, ..., K to be real in this work. In llT5l . Xj, Fj, i = 1, ..., K 
are complex numbers. In general, real and complex interference channel with confidential mes- 
sages can have very different achievable schemes; see [|TT]| for example. However, for the 



many-to-one interference channel, whether the model is real or complex does not lead to any 
difference in terms of the results presented in this work. In a complex model, since the network 
is sparsely connected, all phases of the complex links can be canceled by pre-multiplication at 
the transmitters and post-multiplication at the receiver. The channel then becomes a real many- 
to-one interference channel. Therefore the same achievable scheme and converse derived in this 
work is applicable to the complex channel model as well. D 

B. Metric 

Define Rl as the secrecy rate of the kth user: 

Ri = lim -H(Wk), l<k<K (6) 

n— s>oo Jl 

The secrecy rate region is defined as all {R{, ....R%^) vectors such that the constraints ([3]), © 
and © are fulfilled. 

The secrecy sum rate R^ is simply 

Rh = Y. Rl (7) 

The secure degree freedom of the secrecy sum rate is a high SNR characterization of i?| and 
is defined as: 

lim sup -^-— (8) 

Pi=P,i=l,...,K log2 [P) /2 
P^oo 

in. Main Results 

In this section, we state the main results for the Gaussian many-to-one interference channel 
with confidential messages. 
1) Secrecy Sum Rate: 

The lower bound and the upper bound on the secrecy sum rate are given in the next two 
theorems: 

Theorem 1: Define i and i as 

i = argmaxjajPi, 1 < i < K — 1} (9) 

i 

i = argmin{aj, 1 < i < K — 1} (10) 



The secrecy sum rate is lower bounded by: 






where 



^max{0 llog,(P,)}-max{0 llogj 7/ J }-/W dD 



f{K) = {2K - 1) ('^ + :^ log, (K)] + 1 log, (JO (12) 



Theorem 2: The secrecy sum rate is upper bounded by 

i?E<EC(P.)-c(|£^) (13) 

where C{x) = \ log2(l + x). c = max{l, a^, i = \...K — 1}. 

The derivation of the achievable rate in Theorem [U is given in Section |IVl The upper bound in 

Theorem [2] is derived in Section |Vl 

2) Secure Degree of Freedom: 

From Theorem [2] and Theorem [H we observe the secure degree of freedom for the secrecy 
sum rate defined in ([8]) is equal to A' — 1 if there is at least one i such that ai ^^ Q,\ < i < K — 1. 
Note that for the many-to-one interference channel without secrecy constraints, the degree of 
freedom for the sum rate is also K — 1 ifTSl . which was shown by giving the transmitted signals 
of users 2, ...,fr — 1 to user K as genie information. Hence imposing secrecy constraints does 
not lead to any loss in terms of the degree of freedom for the sum rate. 

3) Constant Gap Results: 

Secure degree of freedom provides the characterization of the secrecy sum rate at high SNR. 
For finite SNR, the gap between the lower bound from Theorem [T] and the upper bound from 
Theorem [2l is, in general, a function of both user number K and the channel gains ^/oi". However, 
in two cases shown below, we find this gap to be unaffected by the channel gains. 

Corollary 1: When either of the following two conditions holds, the gap between the upper 
bound and the lower bound on the secrecy sum rate given by Theorem |2] and Theorem \T\ is 
bounded by a constant which is only a function of K. 

1) When all interference links are weaker than direct links: 0<ai< 1, l<i</< — 1, or 

2) Symmetric SNR: ai = a, Pi = P, I < i < K - 1 
We provide the proof, which is immediate, next: 



Proof: When 0<aj<l,l<?<Ji'— 1, we have c = 1 in Theorem [2l Hence the upper 
bound is 

E C (P,) - ]- l0g2 [k-I+Y. <^^P^ + \ l0g2(^ - 1) (14) 

k=l \ i=l J 

On the other hand, the lower bound is lower bounded by 

Y, max{0, ]- log2 (Pfc)} - \ log2 (^^ - 1 + E «i^^) " /(^) (15) 

fc=l \ i=l / 



Since 



2log2(l +a;) -maxio,-log2x| (16) 

:min|-log2(l + a:),-log2(^^— jj<- (17) 



we find the difference between (1151) and (1141) is bounded by 

K 



2 +\og^{K-l) + f{K) (18) 



which is only a function of 7^. 

When ai = a, Pi = P, 1 < i < K — I, the upper bound is 



J2 C (Pfc) - I log2 (1 + min{l, a}P) (19) 

fc=i -^ 

On the other hand, the lower bound is lower bounded by 

J2 max{0, ^ log2 (Pfc)} - ^ log2 (1 + min{l, a}P) - f{K) (20) 

fc=i 

we find the difference between (|20l ) and (1T9l ) is bounded by 

A' 



2 + / (^) (21) 



which is again only a function of K. 



IV. Achievable Scheme 
A. Some Useful Results on Nested Lattice Codes 

In this section, we state some results on decoding nested lattice codes from fTP| for the 
reader's convenience. The proofs of these results can be found in IfTTI . 

We begin by introducing some notations. A nested lattice code is defined as an intersection 
of an A^-dimensional "fine" lattice A and the fundamental region of an A^-dimensional "coarse" 
lattice Ac, denoted by V(Ac). The modulus operation is defined as the quantization error of a 
point X with respect to the coarse lattice A^: 

X mod Ac = X — arg min ||a; — uL (22) 

ttSAc 

where ||x — yW^ is the Euclidean distance between x and y in R^. 

The signal X^ transmitted over N channel uses from a nested lattice codebook is given by 

X^ = {u^ + d^) mod Ac (23) 

Here u^ is the lattice point chosen from A fl V(Ac), and d^ is called the dithering vector. 
Conventionally, d'^ is defined as a continuous random vector which is uniformly distributed 
over V(Ac) [|T8|. As shown in [llj, a fixed dithering vector can be used instead. Either way, 
the nature of d'^ will not affect the result described below. In the following, we assume u^ 
is independent from d'^ . We also assume that any dithering vector is perfectly known by all 
receiving nodes, the point being that it cannot be used to enhance secrecy. 

Due to the employment of a uniformly distributed dithering vector d^, the average power of 
a nested lattice codebook A fl V(Ac) per channel use can be computed as: 

iV vol(V(Ac)) AeV(A.)" "^ 
where voI(V (Ac)) is the volume of the set V (Ac). 

The rate i? of a nested lattice code book A fi V(Ac) is given by 

i?=^log2|V(Ac)nA| (25) 

where 1 5*1 is the cardinality of a set S. 

We next describe a result on decoding nested lattice codes when interference is present. 

Consider K +1 A^-dimensional lattices Ap j, 2 = 0, ..., K, such that Ap j C R^, 2 = 0, ..., K is 
Rogers-good for covering and Poltyrev-good for channel coding |fT9l . 
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Construct the fine lattice A as in |[T8l Section 7] such that Ap^o C A. Hence {A, Ap 0} forms 
a nested lattice pair. 

Define independent random variables U^ , Uf, ...U^, such that f//^, i = 0, ..., K is uniformly 
distributed over the fundamental region of Ap j. 

Define a^(Ui), i = 0, ..., K as the variance per dimension of Uj^ . When A^ increases, we scale 
A and Ap j, i = 0, ..., K such that cr^(f/j) remains unchanged. 

Define Z^ as a A^-dimensional vector which is composed of zero mean i.i.d. Gaussian random 
variables, each with variance a^. Z^ is independent from f//^,« = 1,...,K. 

Define t^ as a lattice point in A fl V(Ap 0). t^ is independent from Z^ and U[^ , i = 1, ..., K. 

Define the notation J2i = ^^ca = if j < z. 

Define F^ as 

Y^ =lt^ + Y.Uf + zA mod Ap,o (26) 

Define t^ as the value for t^ decoded from Y^ using an Euclidean distance decoder: 



rN „,N 



r = arg min Y'' - u'^ (27) 



■«^6AnV{Ap,o) 

Let Rq be the rate of the nested lattice code book A fi V(Ap 

With these notations, we have the following results: 

Lemma 1: [[HI Define E c^^ iPi) = 0. If 

j=i 



^0 < 2 log2 



^' (f/o) 


\ 




m^ 



(28) 



then for each A^ dimension there exist lattices A, Ap j, t = 0, ...K such that Pr(t^ 7^ i^) decreases 
exponentially fast with A^. 

The following result is adapted from ifTSl (89)] and can be found in ifTTIl . 
Lemma 2: Define /i as 

/i = (29) 

1=1 
Then if fj, > 1, the probability 

C K 

tN , ryN 



Pr f E f/f + ^^ mod Ap,o ^ f: [/f + Z^ 



(30) 
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decreases exponentially fast with respect to N. 

To derive the secrecy rate, we need the following result from ifTTI . 

Theorem 3: IfTTTl Let ti,t2, ...,tKi>e K numbers taken from the fundamental region of a given 

K 

lattice A. There exists a integer T, such that 1 < T < Ji^, and Y. tk is uniquely determined 

k=l 

by {T, E tk mod A}. 
fc=i 
Theorem [3] was used in IfTTI to bound the rate of information leaked to the eavesdropper. In 

this work, bounding this rate can be formulated as the following problem: 

Consider a nested lattice pair (Aj, A^), Ac C Aj. Let X^ = {t^ + d^),k = 1, ...,K, where 

t^ E Af n V(Ac). t^,d^,k = 1,2, ...K axe independent, t^ is uniformly distributed over 

Af n V(Ac). Then we need to find a upper bound on 

/ U, ..., 4_,; Y. ^f , d^, k = l,...,K\ (31) 

to measure the rate of information leaked to the eavesdropper. The reason for this will become 
apparent in Section IIV-B2I 
Lemma 3: 

/('tf,...,t^_i;^Xf,cif,fc = l,...,KJ <N\og,K (32) 



Proof: We use the notation d^ to denote d^ ,k = 1, ..., K. From Theorem [3l (|3T1) can be 
written as: 

/('tf,...,t^_i;^Xf modA„rf^,T'j (33) 
where T is the integer in Theorem [3l 1 < T < K^. 

/(tf,...,t^i;Exf,rf^) (34) 

=/('tf,...,t^_i;^Xf modAcci^T^ (35) 

=1 (t^, ...,4_,- J2 (tf + rf^) mod A,,d'',T] (36) 

=1 (t^, ...,4_,; Y: t^ mod A„ rf^, t\ (37) 
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</ U, ..., 4_,; ^ tf mod A„ d^) + H (T) (38) 

=/ ftf , ..., t^_i; E tf mod A,"! + H (T) (39) 

We next use the fact that Aj fl V(Ac) is a Abelian group with the operation x + y mod Ac. Using 
it along with the fact that t^ is uniformly distributed over A/ fl V(Ac) and is independent from 

t^, ...,t^_]^, we have 

l(t^,...,4_,;J2tk^odA)j =0 (40) 

Hence (l39l) is upper bounded by i/(T) < A^log2 -ft' and we have proved the lemma. ■ 

B. Layered Coding Scheme 

To prove the achievable rates we use a layered coding scheme [JSJ . This means the signal 
transmitted by each node will be the sum of the signals assigned for each layer. Let X^ denote 
the signals transmitted by the /cth user at the mth layer over A^ channel uses. Let X^^ denote 
the term in X^ that comes from the mth layer. Let the total number of layers be M + 1. Then 
layered coding leads to 

M 
^k = zl -^k,m (41) 

-^km ^^ J'^^t ^^ ^11 ^^^o vector if no power is assigned to the mth layer by the A;th user. 
The signals received by the kih. receiver 1 < k < K over A^ channel uses is simply 

M 

n^ = E x^,^ + z^ (42) 

m=0 

Hence the signal component received by each of the first K — 1 receivers is naturally expressed 
as the sum of signals from at most M + 1 layers. If a codebook with a proper average power 
and rate is chosen for each layer, the receiver can process the layers sequentially. This means, 
when processing the mth layer, the receiver decodes X^^, subtracts it from F^^, and uses the 
result as the input when processing the m — 1th layer. 

For the Kth receiver, its received signal over A^ channel uses is given by 

Y^ = E V^^X^ + X^ + Z^ (43) 

fc=i 



13 
K-1 M M 

= E (^ E ^kj + E ^Im + z^ (44) 

fc=l m=0 m,=0 

= E (^x,^ + E V^kXJ^J + Z^K (45) 

m=0 fc=l 

Again, if a codebook with a proper average power and rate is chosen for the each layer, the 
receiver can subtract the influence of X^,^ + Y.k=i A/^-^fcfm ^^er processing layer m and move 
on to layer m — 1. 

The maximal power that X^„^ can use is determined in the same way as ifTSl . As shown in 
[fTSl . we first determine the so-called delimiter of each layer based on the following procedure: 

1) Compute the set Qi as the union of the pairs {ajPj, aj}, z = 1, ..., K — 1. 

2) Let Q2 be the subset of Qi which only contains numbers that are greater than 1. 

3) Let Q be the union of Q2 and the pair {Pk, !}• 

4) Compute the list Q such that the zth number in Q is the zth smallest number in the set Q, 
i > 0. 

5) The number of layers M + 1 equals the cardinality of the list Q. 

6) The delimiter of the 0th layer is defined as (—00, 1] . The delimiter of the mth layer, m > 1, 
is given by [q-m-i, q-m], where q-i is the ith number in the list Q. 

Let Pfc m be the maximal power that the kth user can spend on the mth layer, i.e., E[Xl ^] < Pk,m- 
Then P^ ^ is computed from the delimiters of the layers as follows ifTSl : 

1) For the first K — 1 users, the power allocated to each layer is computed as follows: For 
the ith user, 1 < k < K — 1, 

a) At most P^ = max{l/aj — 1,0} power is allocated to the 0th layer. 

b) If ttiPi > qm.+i and qm > ai, at most (gm+i — qm)/cii is allocated to the mth layer. 
Otherwise, no power is allocated to the mth layer. 

2) The power allocation of the Jith user among different layers is determined as follows: 

a) No power is allocated to the 0th layer. 

b) If Pk > qm+i, at most qm+i — q-m power is allocated to the mth layer. Otherwise, no 
power is allocated to the mth layer. 

Note that, with this power allocation among layers, it can be verified that the total power of the 
ith user does not exceed Pj. 
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We next describe the codebook used at each layer: We use Ck^m to denote the codebook used 
for the mth layer by the kth user. If the maximal power this user can allocate to the mth layer 
is 0, then C^ m only contains an all zero vector. Otherwise, we construct C^ „ as follows: We 
start from a A^-dimensional nested lattice codebook denoted by (Af^rn,-^c,m), ^c,m C Ajm, with 



average power 1 and rate Rm- Then, we scale every codeword in the codebook with JPk,m so it 
has average power P^rn and let it be Ck^m- This means for a given layer m, Ck,m, k = 1,2, ..., K 
are scaled forms of the same nested lattice codebook (Aj^, Ac,m)- Hence, X^^ is given by 



Km = ^Pk^rn{tl^ + dlJmodK,m, m>0 (46) 

where t^,„ G A/,^ H V(Ac,m)- c?^m is the dither vector. 

To simplify the expressions, we set a^- = 1. Let Um denote the set of users that can allocate 
nonzero power to the mth layer. Then, for m > 0, we can write 

A'-l 

^K,m + XI V^^k,m (47) 

fc=l 



= E aK^ {^Im + <n^) mod A,,„ (48) 

Notice that the power allocation among layers are chosen such that akPk,m equals Qm+i — q-m- 
Hence (l48l) equals: 

V<lm+l - Qm E {tk,m + dk,m) ^od A^^ (49) 

k£Um 

1) Decoding: We next describe the decoding process at each receiver ifTTIl . First we describe 
the decoding process at receiver K. The decoder starts from layer M and processes the layers 
according to their index in decreasing order. It subtracts the influence of the signals from a layer 
after it is decoded. Since user K does not transmit at the 0th layer, receiver K processes M 
layers in all. 

Define Yj^^ as the partial sum in Y^: 

rh K~l 

yl^ = E i^lm + E v^^KJ + Z^K (50) 

m=0 fc=l 

When processing the mth layer, receiver K first computes: 

(y?m - V?m+1 - fe E ^fc!m) mod yj q^+l " QrhKrh (51) 
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Applying (|49l) . we find (|5T| ) equals: 

m-l / /<-l \ 

(V?m+1 - gm IZ ^Jm + H -^Jm + H V^^J'm + ^^) mod V^m+l - ^mAcm (52) 

fceWm "1=0 \ fc=i / 

Note (|52l) has the same form as (|26|) . where -\/gm+i — qm^c,m. corresponds to Ap^o- \/(im+i — Qm 
Y^ t^^ vilod^J qm+i — qm^c,m corresponds to t^ in (|26|) . Then, according to Lemma [H if 



1 , , qrn+i - q. 



Q<R^< max{0, -log2( ^^^ ^'" )} (53) 

1 + S Yj 0'kPk,m 
m=0 fceWm 

then receiver K can decode (y'gm+i — fe S ^^m) ^0*^ A/gm+i — (lm-^c,m from (|52l ) with high 
probability. We next derive a lower bound for the right hand side of (|53] ) like IfTSl . From the 
power allocation among layers, we observe 

akPkfi < 1, l<k<K-l (54) 

and for m > 1, 

0'kPk,m < "Jm+l " Q'm (55) 

|W^|<i^ (56) 

Applying these results to the right hand side of (l53l) . we find it is lower bounded by: 

2 

i + 

= maxjO, - log2 1 (58) 

Z Kqfn 

Hence a sufficient condition for receiver K to be able to decode {^/qfh+l — qm. Y ikm) niod 
y/qrn+i " qrhK,ni IS to rcquirc 

0<Rm< max{0, ^ log^ ^^^Jl^} (59) 

After decoding (Vgm+i — q'»f). Z) ^^m) modA/gm+i — qrh-^c,fh, receiver i^ subtracts it from 
(|52|) and obtain 

»n-l / K-l \ 

( E P^x,„^ + E v^^.^^n. + Z^) mod V9r^+i - g^A,,^ (60) 

m=0 \ fc=l / 

From (l59l) , we notice if i?™ > 0, we must have 

g^+i -qin> Kqrh (61) 



rn 1 ym+1 ym T /cn\ 

maxjO, - log2 :r—^ 1 (57) 

1+ E (i^(g™+i-g.„)) + (K-l) 
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Note that the right hand side of ( |6T| ) is an upper bound on the average power per channel use 
of the term inside the modulus operation in (l60l) . Hence, we can apply Lemma |2] and find that 
(|601 ) equals 

m-l / K-1 \ 

Y. (Xl^+ E V^^XQ + Z^ (62) 

m=0 \ fc=l / 

with high probability. Thus, receiver K can use (l60l) when it decodes layer m — 1. 

We next describe the decoding procedure at receiver k, 1 < k < K — I. Receiver k processes 
layers in a way similar to receiver K, except that it starts from layer m such that Qm+i = caPi- 
If flj > 1, the index of the last layer it processes is the one whose q^ = cn- Otherwise, it decodes 
all the way to the 0th layer. 

We define Y^^ as the partial sum in Y^: 

fh 

^k,rh = Yl ■^k,m + ^k (63) 

m=0 

When processing the mth layer, receiver k first computes: 

(n,m - <^) mod A,,^ (64) 

m—l 

= {tl^ + E Xk,m + Z^) mod K,^ (65) 

m=0 

Again since (|65l) has the same form as (|26|) . according to Lemma [H if 

< i?^ < max <( 0, ^ log2 ^_/''^ ^ (66) 

S Pk,rn + 1 
m=0 

then receiver k can decode t^^ with high probability. 

If Ofe < 1, Pk,m = (qm+i - qm)/ak,m > 1. Pkfi = (1 - afc)/afc. Hence the right hand side of 
(l66l) equals: 



1 1 fe+l ~ Q'ti 



■^ - / "x-^ gm+1— gm 1^ 1 — gfc 



max <( 0, - log2 — -^^^ ^ } (67) 

- max <^ 0, - log2 > (68) 

12 Qrh ) 



(69) 



If Ofc > 1, there must exists mo such that g^o = c^fc- The right hand side of (1661) equals: 

1 1 qm+l — q-rh I 



max <; 0, - log2 ^_, 

aj E Si^^^^^^ + l 



2 

Q-fc 



m=mo 



17 



{n ^ 1 Qm+1 Qm I /tax 

0, o log2 f (70) 
2 Qm J 

Hence, in either case, we arrive at the following sufficient condition for receiver k to decode 



0<Rm< max{0, ^ log^ ^-^^±^^^} (71) 



k,m' 



We observe (ITTI) is a less stringent condition than (1591) . 

After decoding t^^, receiver /c subtracts it from (|65]) and obtain 

m— 1 

( E ^M. + Zj^) mod A,,^ (72) 

m=0 

From (TTTI) , we notice if i?,,! > 0, we must have 

Qm+l -qfh> Qm. (73) 

Again the right hand side of (l73l) is an upper bound on the average power per channel use of the 
term inside the modulus operation in (fTII) . Hence we can apply Lemma |2] and find (|72|) equals 

m— 1 



m=0 

with high probability. Hence, receiver k can use ( 1721 ) when it decodes layer m — 1. 

With this, we have shown that the receiver k, 1 < k < K — 1, can decode {t^^ : Pk^m > 
0, m = 0, 1, ..., M} and the receiver K can decode {{J2keUm ^k,m) ^^od Ac,m, ^ = 0, 1, ..., M} 
if dSll) holds. 

2) Secrecy Rate Computation: We next derive the achievable secrecy rate region for each 
layer, from which we will derive the achievable secrecy rate region for the whole channel. 
Define U^ as: 

U'^=Umr){l,...,K-l} (75) 

We model the mth layer as the following equivalent channel, which takes lattice points t^,„ as 
inputs, and produces X^^ as outputs to the kth receiver, 1 < k < K — 1 and X^^ as outputs 
to the eavesdropper (the Kth receiver). 

X^,m = {tk,m + d^,J) mod A,,^, keUi 

E V^X^^^, m>l (76) 

yN _ } k&Am 

^S,m — \ AT AT 

E V^kX^^^ + Z^ m = 
keUm 
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To achieve a trade-off between the secrecy rates of the lattice points between the first K — 1 
users and the Kth user, for a layer m such that K E Um, two different modes of operation are 
possible: 

1) The first K — 1 users may choose to set t^^ = 0,k E Um fl {1, 2, ..., if — 1} so that for 
layer m, receiver K decodes (Efcew™ tk,m) mod Ac,™ = t^ „. 

2) The Kih. user may send t^ ^ by choosing it randomly from the nested lattice codebook. 
In this case, t^^ does not carry any information. Its purpose is to reduce the amount of 
information leaked to the Kih. receiver regarding the value of t^rm ^ ^ ^L- 

For the first mode, the achieved secrecy rate region is given by: 

Ri = 0, l<i<K-l (77) 

0<RK<Rm (78) 

For the second mode, Rk = 0. We next find the achievable secrecy rate region for i?i, 1 < z < 
K — 1. Define M4,m as the confidential message that is transmitted over the mth layer by the 
kth user. Let the total number of channel uses be n x A^. Define -R| „ as: 

Rl^= lim -\h{W,,J (79) 

For a set S, define Ws,m and ts^rn as: 

Ws,m = {Wk,m -.kES} (80) 

ts,m = {C --keS} (81) 

Then we have 

Lemma 4: Let c?^ be the shorthand for all dithering vectors used at layer m. The following 
secrecy rate region is achievable for the channel in (|76l) : 

< Rl^^ < Rm- Rl^m^ k E U'„^ (82) 

k&A'^ °° ^^ 

fce5 

< Rl^ (85) 

i?f =0,A;G{l,...,ir}/W; (86) 
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The mutual information is evaluated with t^\„ being independent and uniformly distributed over 
the A^-dimensional nested lattice codebook. 

Proof: The codebook of user k, k E U'^, is a length-nA^ real sequence sampled in an i.i.d. 
fashion uniformly from the nested lattice codebook Ck,m- Each codebook is randomly binned into 
several bins, each containing 2"^^*™ codewords. Each bin is labeled from 1 to 2"^'-^'""^'=.'"'*. 
User k selects a codeword randomly from the bin indexed by Wk,m and transmits it over nN 
channel uses. Receiver k can recover t^^. Hence, it can recover the length-nA^ codeword and 
consequently, the bin index. 

It remains to prove the secrecy constraint: 

jim 1/ {Wu^^m-. Xg^, dl) = (87) 

holds. This can be shown as follows: 

H(Wu^,^\X^-^,d'^-) (88) 

=H {Wu'„,,m\X^'^, d'^^j - H {Wu;^,m\X^J^, d^", t^l^^Jj (89) 

=i{Wu:^,m;tl^iJX^;:^,dZ'') (90) 

>H{tl:JrjX^rm^dZ'')-ne (92) 

—H [^UL,m) ~^ ^ [^UL,m'i ^S,m) "m ) — nS (93) 



=nNR,^m - I (tZm-, ^S, €"") - ne (94) 

>nNR,,r^ - nl (t^^,„; X^Jj - ne (95) 

Equation (|90l) follows because Wu^,m is determined once X^'^, d^ is given. Equation (|92l ) 
holds because given Wu^,m, the uncertainty in t^P'.^ can be resolved by receiver K as its rates 
are within the capacity region of the multiple access channel with inputs t^" „ and output 
X£j^, (i^". This is a consequence of ([83] ) and (|84l ). (|95l) follows because each N channel uses 
are memory less from the other A^ channel uses. 

Dividing both sides by Nn and letting A^, n tend to oo, we have (|87l) . Hence we have proved 
the lemma. ■ 

Remark 2: The secrecy sum rate of the region given by Lemma |4] is always lower bounded 
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by 

\U'JR^ - lim Ij (t^^,^; Xg^, C) (96) 

regardless of whether the region is empty or not. To show this, we can let R%„^ equal 1/\U'^\ 
times the right hand side of (l83l) . Because the region defined by (l83l) and (l84l) is symmetric over 
i?^ „^, the above choice of i?^'^ always fulfills dSS]) and ([Ml)- If Rl^rn > ^m , then ([961) is clearly 
a lower bound to the sum rate since it is negative. If Rf. ,„ < Rm, then from (|82|) we observe 
(l96l) is a lower bound to the sum rate. D 

Define TZm, a region of Rl „, as a convex hull of the region given by (I82l)-(l86l) and the region 
given by (|77])-(|78]) if m > 1. T^o is just the region given by (I82l)-(l86l) since user K does not 
transmit at layer 0. Then if nN is the total number of channel uses, we have: 

Lemma 5: The achievable secrecy rate region for the whole channel is given by 

M 

E T^rn (98) 

m=0 

Proof: In each layer m > 1, we either let user K transmit or let the first K — 1 users 
perform the random binning scheme given in Lemma H] and let the i^th user send a randomly 
selected lattice code to protect the signals of the first K — 1 users from leaking to receiver K. 
Using the sequential decoding and subtraction scheme described in Section ITV-Bli the first K — 1 
receivers can recover the lattice points from their respective transmitter for each layer. The Kth 
receiver can recover the lattice point transmitted by the Kth user if the first K — 1 users are 
not transmitting at this layer. From the sequences of recovered lattice points, each receiver can 
recover the index of the bin which contains these sequences and hence can recover the messages. 
Thus, clearly, the region (l98l) fulfills the requirement that messages must be transmitted reliably. 
It remains to show that the messages of the first K — 1 users are confidential from the Ji th 
receiver. Let rf^" be the shorthand of dithering vectors used at all layers. Then we can write: 

l{{Wu^,^:m = Q...M]-Yl^) (99) 

/ M \ 

=/ {Wu^^^,^ : m = 0...M} ; ^ Xg^, rf^" (100) 



m=0 
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<I {{Wu^,m : m = 0...M} ; {x^^:^, d""^ : m = 0...m}) (101) 

M 

<E^K™,-^S^'^''i (102) 

m=0 

Since lim 4. J fw^i^, „; X^" , rf^") = 0, we have 

J^oo ;^^ ({^"^- ^ "^ = 0-^4 ' Yk) = (103) 

Hence we have proved the lemma. ■ 

Evaluating the region (l98l) is difficult due to the difficulty in deriving a lower bound to the 
right hand side of (l84l) . However, a lower bound on the secrecy sum rate can still be found, 
which we describe below: 

From the discussion in Remark [2l we notice a lower bound on the secrecy sum rate can be 
obtained by finding an upper bound on the right hand side of (f83l) . 

For m > 1, I (ty, ^; X£^, d^j can be upper bounded as follows: 

n^^;„,..;^£„.,0 (104) 

K-l 

=K^U!^,m'->^K,m+ zl V^^k,m-,dm) (105) 

kdU'^ 

=I{tu^,m] Vlm+l - Qm J2 (^k,ra + dk^m) mod V^m+l - QmAcm, d^) (106) 

fceWm 

=ntu;^,m: E (C + <m) mod Ae,™, 0?;:) (107) 

fceWm 

From Lemma |3l we find (11071) is upper bounded by A^log2 \Um\- 
Hence 

lim 1/ (t^^,„; Xg^, d^) < log2 |W„,| (108) 

Let the secrecy sum rate provided by each layer m be denoted by -R|„. Hence we -R^m' 
m > 1, is lower bounded by: 

Rkm>WRm- log, K (109) 



^m In 1 9m+l ~ Q'm 1 , j^ /urn 

max <^ 0, log2 > - log2 K (1 10) 



2 [ ' ^' Kq„ 

For the 0th layer, since the signals are not aligned on a lattice, the method we use to lower 

bound the sum rate is different. Recall that rf^" denotes the dithering vectors used by those users 
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transmitting at the 0th layer, which are known by all receivers. We first upper bound the right 
hand side of (1831) as shown below: 

<^(^^^,o,C;^S) (112) 



-I tK,o. ^r; E ^^M + z^ (113) 



fceWo 



<^ (^^^,o; E v^^M + ^f I (114) 

<iVC I ^ E kx^ J I (115) 



Kk&A^ 



<NC{\U',\) (116) 

=-log2(i^) (117) 

where the notation C{x), as defined before, is ^ log2(l + x). Therefore, from Lemma IH we have 

^S,,n=0 > E ^M - ^ l0g2 W (118) 

Using (II 101) and (11181) . we are now ready to prove Theorem [T] 

Proof of Theorem [71- From (I110|) . i?|^ ^, m > 1 is lower bounded by 



?l,.>^max{o,log,^y^- 



^E,^ >^ max 0, log2 ''-^l "- - log^ i^ (1 19) 



>M^ max jo, log2 ^!^±l-^!!i| _ ^ log, iT - log, K (120) 

2 ( g^ J 2 

Since max{0, log2a;} > max{0, log2(l + x) — 1} [[TSl . we find (11201) is lower bounded by: 

^-max<^0,log2 I 1 + )~ I 2 — ^^2^ ^ ^ 

>^-max<^0,log2 I ]\ — logaAT (122) 



dm 



~^\U'J /. , (qm+iW K-1 K + 1 

>^ max |0, log2 ^-^j j-— — log2 K (123) 

From (11181 ). the secrecy sum rate provided by layer 0, i?| q, is lower bounded by: 

^E,o> E^M-^log2(^) (124) 
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Define fhiiK) as 



Then we have 



>Eilog2(-)-^log2W (125) 



/M(i^) = M ('^^ + ^^ log2 (iT)) + ^ log2 (/r) (126) 



E ^E,™ > E ^ max{0, log, f ^) } + 5: i log, (1) - f,, (K) (127) 

m=0 m=l ^ \ (im / k&A'f^ ^^^ 

Define fi^ as the 

5fc = {m : Pfc,„ > 0} (128) 

Then (11271) can be written as: 

E( E max{0 ilogJ*^]} + max|ilog2(l),0|)-/MW (129) 

>$:max{0,^log2(P,)}- ^ niax{0,^log2f^^^V-/MW (130) 

fc=l -^ m^BA' \ Qrn J 

Recall that i and i were defined in dH) and (flOl) respectively. With these notation, we can lower 
bound (11301) as: 

^max{0, ^log2 (Pk)} - max{0 ilog, ( ^;f ]} - f^ (K) (131) 

k=i ^ ^ \max|i, a-|y 

As shown in [Ha, M < 2i^ - 1. Hence 

/m(/^) < (2i^ - 1) (^^ + ^^ log, (A^) + \ log, (if) (132) 

Applying it to (11311) . we get the theorem. ■ 

V. Upper Bound on the Secrecy Sum Rate 

Let n be the total number of channel uses. Define V" as: V^ = I]^7^ \^X^ + Z^. We use 
the shorthand Aa-^^a2,...,ak to denote {Aa-^, ...,Aa^}. Then we have the following lemma: 
Lemma 6: 

nRh <I {Wr,...,K^i, Yl^^^K-i) - I (W^i,...,i^-i; V^) + / (Xl- r^|X[;...,^_i) + m (133) 
where e is nonnegative and Um„^.oo e = 0. 
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Remark 3: Lemma [6] is an extension of the technique from ||71. The technique expresses the 
upper bound on the secrecy sum rate in two terms, as shown by (11331) . The second term in 
(11331 ) corresponds to the point-to-point link between the A'th user and its receiver. Interference 
is removed since X" j^_^ appears on the condition term. The first term in (11331 ). as we will see 
later, can be bounded use the technique from [8J, as it shares the same form as the secrecy sum 
rate upper bound for a multiple access wiretap channel considered therein, whose main channel 
are composed of the links between the first K — 1 users and whose eavesdropper receives V^, 
which is the interference experienced by the A'th user. D 

Proof: The two user case {K = 2) has been shown in [|71 Appendix]. The same technique 
can be used here to prove Lemma [6l We first prove 



+ / {W,_K-i; V^\Y]^) + I {X^; Y^) (134) 

This can be done by starting from [|7l (41)], with Wi being replaced by Wi^,,,^k-i, Yi being 
replaced by yi,...,i^_i, Xi being replaced by Xi ... i^„i, Y2 being replaced by Yk- The V^ therein 
is replaced by V". In this way, the secrecy sum rate is upper bounded as: 

R^ - ne (135) 

=H {Wi,,„^k) - ne (136) 

</ (W^,...,K-i, n:..,i^-i) - I (W^i,...,ir-i; >"x) + I [Wk, Yk) (137) 

=/ {W,_K-i; n:..,i^-i) - I iWi,...,K^i; V^) - I iW,_K^,; Yll\V^) (138) 

+/ {W,_K-i; V^\Y^) + / {Wk; Y^) (139) 

</ (W^i,...,i^-i; Yl_j,_^ - / {Wi_K^v. V") + / (W^i,...,i^-i; V'^\Y^) + / {Wk; YJ^) (140) 

</ {w,_K-i; n?...,x-i) - I (W^i,...,x-i; V") + I {W,_K-i; V'lY^) + I {XI; Y^) (141) 
Hence we have proved (11341) . It can be shown that the following inequality holds 

/ {W,_K-i; V^\YJ^) + I (X- ; r^) < / (X^; r^|X£„ ,,_i) (142) 
by using the following steps: 

/ {W,,...,K-i; V^\YJ^) + I {XI; Y^) (143) 
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<I [Xl..,K-i; V^\YJl) + I {XI- F^) (144) 
=/ (Xl- Y-\Xl,^^__,) + / [Xl- Xl,,^j,^,) 

- I {Xl- Xl^„„^_,|y^) + I (Xi;„„^_,; V-\Y^) (145) 

=1 {Xl; r^|X£..,^_i) + / (X£„„^_i; l-"|F^) - / [Xl- Xl,,^j,_,\Y-) (146) 

=/ [Xl-, Y-\Xl,^^_,) + / (Xl„^^_,- V-\V^' + Xl)-I [Xl- X£...,^_i|\/" + Xl) (147) 

=/(X]^;F^|X£..,^_i) +/(X£...,,,_i;X]^|y" + X]^) -/(X]^;X£...,^_,|\/" + X]^) (148) 

=/(x]^;F^|X£..,^_i) (149) 

which yields (11421) . Applying (11421) to (11341) yields (I133D in the lemma. ■ 

Let y- = E£i' A/f ^r + a/I^^ + J^^Zl , where c = max{l, a^, ^ = 1, ..., i^ - 1}. Z^ 



is a length-n vector that has the same distribution as Z]^ but is independent from Z"^. Then we 
have the following lemma: 
Lemma 7: 

Proof: Because V^' is a degraded version of V", from Lemma [6] and data processing 
inequality, we have 

nRI: <I {Wi_K-i; ^/:...,/,_i) - / {Wi_K-i; V^) + / {X^; Y^\Xl^,j,^,) + ne (151) 

where £ > and lim„^oo e = 0. Next, we extend the derivation in (HI (58),(65)-(68)] to the first 
two terms, by replacing F" with F" ^.„p The derivation in fS] (58),(65)-(68)] corresponds to the 
case of Ji' — 1 = 2 here. In particular, if we define the notation %" = {]: I < j < K — l,j ^ i}. 
then we can write 

^ /(Xf; n':..„^_i|Xr., W,) - /(X£.,.,^„,; V'^IW.^K^,) > (152) 

i=l 

which corresponds to (81 (58)]. To prove (11521) . we start with the fact that — < l,Vi. Then, 
using — < l,Vz, we have: 

I (Xr; YZ..,K-i\Xrc, W,) > I (Xf; y"|Xr., W,) (153) 
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The right hand side of (11531 ) can be lower bounded as: 

/(Xf;^"|Xf.,iyi) (154) 

=/ (Xf ; V>"|Xr,..,_i, W,_K-i, Xr+i,..x-i) (155) 

=/ (Xf ; ^", Xr+,_„^„ JX£..,,„,, PFi,...,x_i) - / (Xf; Xr^i,..^.„i|X£..,,„i, iyi,...,,,_i) (156) 

=/(xf;^",Xr+i_„^„i|X£.,,„i,iyi,...,x_i) (157) 

>/ (Xf; r"|Xi;..^,_i, iyi,...,x-i) (158) 

( 11571 ) follows because each user does its encoding independently. The message of each user 
is also independent from each other. Hence / fXf ; Xj'!,_i,..i<:_i|X" j_]^, VTi ..^x-i) = 0. From 
(fT53]) . (fT54l)-(fT58]). we have 

I (^r; yi..,K-i\X^^. W^ > I (^r; V^l^"...-!, W^_K-i) (159) 

Adding (fT59l) for z = 1, ..., if - 1, we have (fT52l) . 
We next use the fact that: 

I{W,_K-i; n?...,i.-i) - nWi,...,K-i; vn 

< j2 nwr; n:..,/.-!!^.") - nwi,...,K-i; v-) (i60) 

which corresponds to [f8l (66)]. (11601) can be proved as follows: 

/ {Wi_K-i; n?...,i^-i) - 1 (W^i,...,x-i; V^) (161) 

= 5] / [W^; n';...,^_i|Vri,...,,_i) - / (l^i,...,/^_i; V^) (162) 

< ^ J (ly,; xr., 17:...,/^-i|W^i,....-i) - ^ (W^i,...,i^-i; V^") (163) 

1=1 

= ^ {l {Wi;X^4W^_,.,) + I {Wf,Y,l,^j,_,\X^.,W,,,,,,.^^^ (164) 

i=l 

= ^ / {W,; n':,„,^„,|Xr.) - / {w^_K-i; V^") (165) 

i=l 

The lemma follows by adding the left hand side of (11521 ) to the right hand side of (11601 ) and 
using the fact 

I te; YZ..,K-i\xr^ = I (x^; Yn (166) 



27 



We next prove Theorem [2l 

Proof of Theorem |21' The theorem follows by evaluating the bound in Lemma |71 This is 
done by extending (81 Theorem 4]. [^ Theorem 4] corresponds to the case with K — \ = ?>. 
We start with 

£' / (X- rn - I {Xl„j,^,-, V-) (167) 

= Y.h{X- + Z-)-h[Y.^,X^ + Zl\-Y.h{Z-) + h{Zl) (168) 

j=l \ 4=1 / i=l 

We next derive an upper bound on the first two terms in (|168l) . The main technique is the 
generalized entropy power inequality (Si, [|20ll : Let A^,i = 1, ...,m be m length-n continuous 
random vector. Let Si, ..., Sp be p arbitrary subset of {1, ...,m}. Then 

2" \h 'J >i(^2 V^«^ /) (169) 

^ fc=i 

where 7 is the maximal number of sets in Si, ..., Sp in which any A" appears. 

Without loss of generality, we assume vi < V2 < ■■■ < vk~i < 1- Define vk = ^,vq = 0. 
Define N^,j = 1,...,K as zero mean independent length-n Gaussian vector whose component 
has unit variance. Then we have 

/K-l 
2/ 



2 V-i / (170) 



'K-l 
2 



2^h[ y: v^x^+ y: yjv,-v,^,m 



j=i 



(171) 



> 



1 K-l ^h\^,X^+Y,^/^^F^iN^] K |/^ EV^'i-^.-i^r 



K 



-(^2 V ^-1 ^+E2 ^^- n (172) 



-"■ -^ i=l j=2 



if 

2j 



_(^ 2"''(v^^>"+v^^«") +X]2" ^^"^^ V) (173) 



-'^ -^ i=l j=2 



i^-1 ^ , K 

2.h xr+z" 



1 ,-^- _ 2 



-( E t;.2^H^r+^rj + ;^ 2vre (l - v,-i)) (174) 



-'^ -^ i=l i=2 



The general power of entropy inequality was used to obtain (|172|) . In (|173l) . we replace 



E V^, - ^,-iiV; (175) 
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with y^Zf , since these two terms have the same distribution. 
Hence we have 

E h {Xr + Zr) - h (j: y^Xf + Zl) (176) 

< E h (Xr + ZD - ^ log, f ^( E t'.2^K^r+^r) + f; 2vre (1 - v,,,))) (177) 

For any i, 1 < i < K — 1, (11771 ) is a monotonically increasing function of h (Xf + Zf ). 
Hence (11771) is maximized when Xf is chosen to have a Gaussian distribution with independent 
components. Each component is chosen to have the maximal possible variance P^. Applying this 
result back to (11681) . we find it to be upper bounded by: 

Y. C {Ed - C U^f^j (178) 

This, along with the fact that / (X^; Y^\X^ i^-i ) ^ nC^PK), gives us the result in the theorem. 



VI. Conclusion 

In this work, we have considered the K-user {K > 3) Gaussian many-to-one interference 
channel with confidential messages. We derived the achievable secrecy sum rate as well as the 
upper bound on the secrecy sum rate. The achievable rate was obtained using layered coding 
and using nested lattice codes for each layer. The upper bound and the achievable secrecy sum 
rate matches in terms of secure degree of freedom. Since it also matches the degree of freedom 
of the sum rate when the secrecy constraints are removed, we observe the secrecy requirement 
does not reduce degree of freedom in this model. 

We have also identified two cases where the gap between the upper bound and lower bound 
is only a function of K, and is independent of channel gains. One case is when the channel 
gains of the interfering links are all < 1 (direct link gains). The other case is when the power 
constraints of the first K — 1 users at the A'th receiver are the same and the channel gains of 
the interfering links are the same. 

Nested lattice codes we used in this work has recently found many applications in solving 
information theoretic secrecy problems, see [[2T| and [EH for examples where the equivocation 
are bounded in terms of Shannon entropy and Renyi entropy respectively. In [[211 . we use nested 
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lattice codes to prove that Gaussian signaling is suboptimal at high SNR for a large class of 
two-user Gaussian channel with secrecy constraints. This work can be viewed as a generalization 
of im to the K-user case (K > 3). 
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